a hybrid expert strongsystemstrong.pdfVIP

A Hybrid Expert System for IT Security Risk Assessment 1 Andrew L.S. Gordon, Ivan Belik, Shahram Rahimi , Department of Computer Science, Mailcode 4511 Southern Illinois University, Carbondale, IL, USA [agordon, ivanbelik, rahimi]@siu.edu Abstract threat develops. Below is a brief summary of similar works modeling risk. The uncertainty and unexpectedness of security risk makes Certainty Factors: Certainty factors are used to it exceedingly challenging to assess and monitor. This manage uncertainty in rule based systems [6]. It is an paper outlines a hybrid approach which factors in t he important factor in risk assessment when the level of uncertainty, unexpectedness and complexity of risk. In this certainty is ascertained. Risk calculation is never definite work, IT security risk in an organization is evaluated using regardless of the method used. Therefore, any risk and expert system which utilizes fuzzy reasoning and